🔶🔷🔴 Cloud 9: Top Cloud Penetration Testing Tools

Here are nine cloud pen testing tools use by pentesters in 2022, and additional resources for enhancing your cloud pentesting skills.

https://bishopfox.com/blog/cloud-pen-testing-tools

#aws #azure #gcp

В IETF идет обсуждение проекта свежего RFC (внесен в конце января этого года) по индикаторам компрометации

Hello,

 

We are writing to update ISACA members in Russia about the consequences of sanctions imposed as a result of the recent events in Ukraine.

 

As you may know, a number of sanctions against Russia have been imposed by the EU, US and others.  The sanctions picture is very complicated and evolving, with the full impact and consequences still not entirely clear to anyone at this time.

 

To ensure we are in compliance with all legal requirements, ISACA is suspending all transactions via our website, and by any other means, with Russia.

 

For the time being, any member or certification holder whose membership or certification is due for renewal during this period will have their membership or certification extended to maintain the status quo while we continue to evaluate the requirements and effect of the applicable sanctions.  This may of course have to change depending on how the sanctions situation changes and other developments that occur, and we will do our best to keep you apprised of any changes.

 

We appreciate your patience, understanding, and support during this difficult time, and we will share further updates as information becomes available.

 

Best regards,

 

David

 

 

David Samuelson​ 
Chief Executive Officer

🔶 Let’s Architect! Architecting for Security

Post collecting security content to help you protect data, manage access, protect networks and applications, detect and monitor threats, and ensure privacy and compliance.

https://aws.amazon.com/ru/blogs/architecture/lets-architect-architecting-for-security

#aws

Сравнение фич server 2016/2019/2022

https://t.co/m9y2LZv4aH

https://cloudsecurityalliance.org/artifacts/saas-governance-best-practices-for-cloud-customers/

"In the context of cloud security, the focus is almost always on securing Infrastructure-as-a-Service (IaaS) environments. This is despite the reality that while organizations tend to consume 2-3 IaaS providers, they are often consuming tens to hundreds of Software as a Service (SaaS) Offerings. The SaaS Governance Best Practice for Cloud Customers is a baseline set of fundamental governance practices for SaaS environments. It enumerates and considers risks during all stages of the SaaS lifecycle, including Evaluation, Adoption, Usage, and Termination."